[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41852&41853: Prepare Tor, Mullvad Browser 15.0.21

1 Sep 2026


      Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build


Commits:
0184a6b9 by Pier Angelo Vendrame at 2026-09-01T13:21:25+02:00
Bug 41852&41853: Prepare Tor, Mullvad Browser 15.0.21

- - - - -


10 changed files:

- projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
- projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
- projects/browser/config
- projects/firefox/config
- projects/geckoview/config
- projects/go/config
- projects/openssl/config
- projects/translation/config
- rbm.conf
- tools/relprep.py


Changes:

=====================================
projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
=====================================
@@ -1,3 +1,11 @@
+Mullvad Browser 15.0.21 - September 01 2026
+ * All Platforms
+   * Updated Firefox to 140.15.0esr
+   * Updated NoScript to 13.6.32.1984
+   * Updated uBlock Origin to 1.74.0
+   * Bug 572: Websites can initiate a WebSocket connection to a lan/localhost port [mullvad-browser]
+   * Bug 45259: Backport Security Fixes from Firefox 155 [tor-browser]
+
 Mullvad Browser 15.0.20 - August 18 2026
  * All Platforms
    * Updated Firefox to 140.14.0esr


=====================================
projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
=====================================
@@ -1,3 +1,20 @@
+Tor Browser 15.0.21 - September 01 2026
+ * All Platforms
+   * Updated NoScript to 13.6.32.1984
+   * Updated OpenSSL to 3.5.8
+   * Bug 45223: Backport tor-browser#45220 - about:torconnect doesn't show when launching the browser in non-PBM [tor-browser]
+   * Bug 45253: Rebase Tor Browser stable onto 140.15.0esr [tor-browser]
+   * Bug 45259: Backport Security Fixes from Firefox 155 [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 140.15.0esr
+   * Bug 44996: Change the 32-bit linux message to the expired version for the final 15.0 release [tor-browser]
+   * Bug 45264: Use parent process for TorConnect redirections [tor-browser]
+ * Android
+   * Updated GeckoView to 140.15.0esr
+ * Build System
+   * Windows + Linux + Android
+     * Updated Go to 1.25.14
+
 Tor Browser 15.0.20 - August 18 2026
  * All Platforms
    * Bug 45204: Rebase Tor Browser stable onto 140.14.0esr [tor-browser]


=====================================
projects/browser/config
=====================================
@@ -114,16 +114,15 @@ input_files:
   - filename: dmg-root
     enable: '[% ! c("var/android") %]'
   - name: fenix-nightly-apk
-    URL: 
-      https://ftp.mozilla.org/pub/fenix/nightly/2026/08/2026-08-17-09-28-31-fenix-...
+    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/08/2026-08-31-19-30-04-fenix-...
     enable: '[% c("var/android") %]'
-    sha256sum: 2def423d5714369709d63ce9fd544049afa35ee83db8e37409ea3fcfd0a7c8da
-  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.31.1984.xpi
+    sha256sum: 835deb4771c604805e2e4bcb76d84a4676998d939b4f350381bdab084425e705
+  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.32.1984.xpi
     name: noscript
-    sha256sum: 28e1689956b610f328c582ae45b326cf666d909c468a87f01d48a10e256dad1f
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4940584/ublock_origin-1.73...
+    sha256sum: 05713eb71e43bee5a78c16c4a1e5c750b755a637c01ef1810e71f518d38fdb25
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4981431/ublock_origin-1.74...
     name: ublock-origin
-    sha256sum: bccc51a773150af4af6e1fd62c7bfdeb7238b79ff2381b998fa9f2e38f64786a
+    sha256sum: 175756d74468c9ba45863f7fc333d3be670f82d5b066314e915814dd547d1652
     enable: '[% c("var/mullvad-browser") %]'
   - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0...
     name: mullvad-extension


=====================================
projects/firefox/config
=====================================
@@ -18,7 +18,7 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: '140.14.0'
+  firefox_platform_version: '140.15.0'
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '15.0'
   browser_rebase: 1


=====================================
projects/geckoview/config
=====================================
@@ -20,7 +20,7 @@ container:
     build_apk: 1
 
 var:
-  firefox_platform_version: '140.14.0'
+  firefox_platform_version: '140.15.0'
   geckoview_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '15.0'
   browser_rebase: 1


=====================================
projects/go/config
=====================================
@@ -1,11 +1,11 @@
 # vim: filetype=yaml sw=2
-version: '1.25.13'
+version: '1.25.14'
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
 
 var:
-  source_sha256: 1d7e2f70b1ee9b93c7df8efcca71f5adcc6a59797a4336c2d10171bd4c174614
+  source_sha256: 9e83f44f5fc297378861b4e16cc6aa114be8add7993fb3ceb2c512380aa4d582
   no_crosscompile: 1
   setup: |
     mkdir -p /var/tmp/dist


=====================================
projects/openssl/config
=====================================
@@ -1,5 +1,5 @@
 # vim: filetype=yaml sw=2
-version: 3.5.7
+version: 3.5.8
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -33,5 +33,5 @@ input_files:
   - name: '[% c("var/compiler") %]'
     project: '[% c("var/compiler") %]'
   - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
-    sha256sum: a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8
+    sha256sum: a8f84a39918ec6415ce765d9b429d313ba97b8143169c172e734b9514464f5b2
     name: openssl


=====================================
projects/translation/config
=====================================
@@ -12,13 +12,13 @@ compress_tar: 'gz'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: 2740d708bcedd2fa43489c8d08cdd80b70bd8cf3
+    git_hash: e80343b33ffc78ea11668763ff299aa91ed80ec1
     targets:
       nightly:
         git_hash: 'base-browser'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: 1768f6c09cb2c4a012daaf8b33d105a7b48f7bfd
+    git_hash: 2d99f98e524cb823f8125e19e7e51a552a8b6895
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -32,7 +32,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: fadbeeb9f8724d06903be5aade3e0ce26529d178
+    git_hash: c1a923a6df0217c843361bd21412d3fc72d5b73a
     compress_tar: 'zst'
     targets:
       nightly:


=====================================
rbm.conf
=====================================
@@ -74,11 +74,11 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '15.0.20'
+  torbrowser_version: '15.0.21'
   torbrowser_build: 'build1'
   # This should be the date of when the build is started. For the build
   # to be reproducible, browser_release_date should always be in the past.
-  browser_release_date: '2026/08/17 15:00:00'
+  browser_release_date: '2026/09/01 10:41:46'
   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
   browser_default_channel: release
   browser_platforms:
@@ -128,10 +128,9 @@ var:
   updater_enabled: 1
   build_mar: 1
   torbrowser_incremental_from:
+    - 15.0.20
     - 15.0.19
     - 15.0.18
-    - '[% IF c("var/tor-browser") %]15.0.17[% END %]'
-    - '[% IF c("var/mullvad-browser") %]15.0.16[% END %]'
   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
 
   # By default, we sort the list of installed packages. This allows sharing


=====================================
tools/relprep.py
=====================================
@@ -141,7 +141,8 @@ class ReleasePreparation:
             if self.android:
                 self.update_zstd()
                 update_fenix_nightly_apk(self.base_path)
-            self.update_go()
+            # Our version of go is EOL, stick with it.
+            # self.update_go()
             self.update_manual()
             self.update_moat_settings()
 



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/01...

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/01...
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

    

Pier Angelo Vendrame (＠pierov)

tags

participants (1)